CVE-2010-4615

Multiple SQL injection vulnerabilities in Oto Galeri Sistemi 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) arac parameter to carsdetail.asp and the (2) marka parameter to twohandscars.asp.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.99% chance of exploitation in the next 30 days, 62nd percentile

Published

2010-12-29

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/15777

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/15777

Security advisories

• http://secunia.com/advisories/42706
• http://www.securityfocus.com/bid/45513

References

• CVE Record
• NVD entry